CWE-1021

CVEs per yearBy the year they were published

1. 20151
2. 20161
3. 20177
4. 201810
5. 201927
6. 202047
7. 202167
8. 202261
9. 202338
10. 202440
11. 202556
12. 202674

Newest CVEs

• CVE-2026-108536

  Multiple vulnerabilities that affects IBM Db2 Genius Hub

  IBM · Db2 Genius Hub

  Medium4.6
• CVE-2026-108049

  Clickjacking vulnerability in the Alosuite web application.

  AM System · ALO Suite

  Medium5.1
• CVE-2026-119715

  NocoDB before 2026.08.0 Clickjacking via Missing Frame-Control Headers

  nocodb · nocodb

  Medium5.3
• CVE-2026-20942

  Microsoft Edge (Chromium-based) Spoofing Vulnerability

  Microsoft · Microsoft Edge (Chromium-based)

  Medium4.3
• CVE-2026-67079

  HCL BigFix AEX is affected by multiple security vulnerabilities.

  HCL Software · BigFix AEX

  Medium6.4
• CVE-2026-77062

  Clickjacking in boneIO

  boneIO · boneIO

  Medium6.9
• CVE-2026-114125

  Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites

  storybookjs · storybook

  High8.6
• CVE-2026-113063

  Clickjacking in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted…

  Google · Chrome

  High8.8
• CVE-2026-60008

  Gitea Jupyter notebook UI redress through CSS class injection

  Gitea · Gitea

  Low3.5
• CVE-2026-109290

  Open WebUI 0.11.1 before 0.11.4 Stored XSS via DOCX Preview

  open-webui · open-webui

  High8.4

Vendors it comes up for most

1. Mozilla52
2. Google45
3. IBM34
4. Apple14
5. HCL Software7
6. GitLab6
7. Cisco5
8. The Browser Company of New York5
9. Huawei4
10. Microsoft4